The smokesignal plugin before 1.2.7 for WordPress has XSS.

The share-on-diaspora plugin before 0.7.2 for WordPress has reflected XSS in share URL parameters.

The rimons-twitter-widget plugin before 1.3 for WordPress has XSS.

The realty plugin before 1.1.0 for WordPress has multiple XSS issues.

The raygun4wp plugin before 1.8.3 for WordPress has XSS in the settings, a different issue than CVE-2017-9288.

The rating-bws plugin before 0.2 for WordPress has multiple XSS issues.

The promobar plugin before 1.1.1 for WordPress has multiple XSS issues.

The pdf-print plugin before 1.9.4 for WordPress has multiple XSS issues.

The pagination plugin before 1.0.7 for WordPress has multiple XSS issues.

The moreads-se plugin before 1.4.7 for WordPress has XSS.

The megamenu plugin before 2.4 for WordPress has XSS.

The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book.

The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book.

The democracy-poll plugin before 5.4 for WordPress has CSRF via wp-admin/options-general.php?page=democracy-poll&subpage=l10n.

The democracy-poll plugin before 5.4 for WordPress has XSS via update_l10n in admin/class.DemAdminInit.php.

The customer-area plugin before 7.4.3 for WordPress has XSS via admin pages.

The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues.

The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues.

The bws-linkedin plugin before 1.0.5 for WordPress has multiple XSS issues.

The wp-statistics plugin before 12.0.8 for WordPress has SQL injection.